What we hold, and why.

The short version

We hold your account, the practice details you put on a pack, and the cases you claim. We do not sell any of it, we do not track you around the internet, and there is no analytics or advertising code on this site. Planning data comes from public registers and is not about you.

Who we are

Lawlatch is operated by Tradecue, the data controller. Write to hello@lawlatch.uk about anything on this page, including a request to see or delete what we hold.

What we hold, and why

• Your account. Email address, a hashed password, optionally your name, and the practice name. The account is created only after Stripe confirms payment. Until then we hold a short-lived sign-up record (hashed password, practice name, email) so Checkout can finish. It expires if you do not pay. Lawful basis: performance of a contract.
• Sessions. A hash of your session token, the time, your browser’s user agent and your IP address. Needed to keep you signed in and to let you revoke a session that is not yours. Lawful basis: legitimate interests in securing accounts.
• Practice details. Firm name, contact, address, phone and email you enter so they can print on a pack.
• Cases. Permissions you claim, condition wording, status, practice notes, evidence files you attach, packs you generate, related applications you map, alerts when a discharge on that case is decided, and countdown reminders when a clock on the case is eight weeks, two weeks, one week, or due. A case exists only after you confirm you are the appointed agent.
• Enquiries. Name, email, and whatever you send on Contact, so we can reply. We do not add you to a list.
• Billing. An identifier for you in Stripe’s system and whether the subscription is running. We never receive the card number.

Cookies

This marketing site does not set an account cookie. The app, where you sign in, uses one:

• pv_session keeps you signed in. It holds a random token, not your details, and deleting it signs you out.

There is no analytics, no advertising and no third-party tracking. Nothing here follows you elsewhere.

Who else sees it

• Zoho Mail sends product email (sign-in, register alerts, clock reminders) and receives mail to hello@lawlatch.uk. An address we email or that writes to us is processed by them.
• Stripe takes payment if you subscribe, and holds your card, billing address and invoices. We never receive the card number — it is entered on Stripe’s own page. What we keep is an identifier for you in their system and whether the subscription is running.
• Map tiles show the site of a claimed permission. Your browser requests tiles for the area on the case; who you are does not go with that request.

That is the full list. We do not sell personal data and we do not share it for anyone else’s marketing.

Planning data is not personal data about you

Applications, addresses and decisions come from public planning registers, the Planning London Datahub and planning.data.gov.uk. Councils publish them, and they redact homeowners’ phone numbers and email addresses before doing so. We hold no extra contact details for the people on those applications.

If you are an applicant and want to discuss what a council has published about you, the council is the place to start — they are the source and the authoritative record. Tell us as well and we will correct our copy.

How long we keep it

Account data for as long as you have an account, and until you ask us to delete it. Sessions expire after 30 days. Password-reset and confirmation links expire in an hour and a week respectively. Cases, evidence and packs stay with the practice until you delete them or close the account.

Your rights

You can ask for a copy of what we hold, ask us to correct it, ask us to delete it, or object to how we use it. Email hello@lawlatch.uk and we will answer within a month. If you are not satisfied you can complain to the Information Commissioner’s Office.

Where it is held

On servers in the EU. Our email and payment providers may process data outside the UK under their own transfer safeguards.

This notice describes the product as it runs. It has not been signed off by a solicitor. The terms of use cover the service itself.